
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
File: J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft (raw, json)
Hash identifier: m6eYqsRw8v6+AwUlU1rpc5owOwdeUaH7PCHGmLf4lHo=
Subject key identifier: 8E:A4:35:3B:14:0A:46:A6:FB:3F:00:4F:6A:54:3C:67:AF:30:F9:82
Authority key identifier: 27:C6:FB:50:70:F4:38:39:50:3C:6B:DD:F5:16:DE:87:C7:FB:89:07
Certificate issuer: /CN=27c6fb5070f43839503c6bddf516de87c7fb8907
Certificate serial: 01A13410C91E53D75587E27B45FFD670151B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
Manifest number: 1A9A
Signing time: Tue 13 Oct 2026 07:01:17 +0000
Manifest this update: Tue 13 Oct 2026 07:01:17 +0000
Manifest next update: Wed 14 Oct 2026 07:01:17 +0000
Files and hashes: 1: J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl (hash: oUZkLWy/liYpeQSi2mvoBXK7Xi1DHFyt8w5RsUQkieo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:10:c9:1e:53:d7:55:87:e2:7b:45:ff:d6:70:15:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c6fb5070f43839503c6bddf516de87c7fb8907
Validity
Not Before: Oct 13 07:01:17 2026 GMT
Not After : Oct 14 07:01:17 2026 GMT
Subject: CN=8ea4353b140a46a6fb3f004f6a543c67af30f982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:4a:86:5b:b7:b4:6f:ad:a8:0f:6e:b4:8e:
53:38:0a:17:9d:16:1c:36:ae:13:c7:38:6e:cc:af:
57:6a:5e:f7:4f:03:c2:37:25:c3:0e:f8:3f:87:40:
f7:36:45:f2:d3:9d:81:28:c5:ea:d2:32:67:62:0a:
32:bc:0c:89:83:03:ce:bc:d2:d8:db:c4:1d:37:31:
e4:b4:f0:a4:53:5f:94:2d:26:1a:ca:91:71:49:41:
a4:ca:64:58:e2:aa:e1:23:4e:ef:5e:04:eb:2a:ad:
cd:90:93:50:3c:e2:fd:81:6a:b0:fc:ed:ef:50:c0:
e0:a4:24:a2:52:14:02:e7:46:24:31:b5:fa:43:ac:
47:7a:71:a3:f0:12:be:21:71:75:f9:9f:b0:b1:19:
71:56:53:15:5e:07:6a:65:cb:46:e8:b7:3d:c4:70:
e3:07:b0:75:c3:02:ab:d8:0e:f2:fe:d6:cd:03:7a:
79:ba:03:a4:95:70:aa:00:e7:76:8d:36:dd:a4:ab:
c2:2c:46:d2:52:6f:1c:5b:53:63:ab:b5:45:a3:dd:
82:ce:87:77:36:46:b4:72:b3:3d:57:57:76:a2:7c:
68:7b:1f:97:ae:db:d0:95:5c:9d:ad:5a:c2:20:6a:
a8:3d:45:bb:49:32:e5:7b:8f:e0:00:07:b1:a6:eb:
17:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A4:35:3B:14:0A:46:A6:FB:3F:00:4F:6A:54:3C:67:AF:30:F9:82
X509v3 Authority Key Identifier:
keyid:27:C6:FB:50:70:F4:38:39:50:3C:6B:DD:F5:16:DE:87:C7:FB:89:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ec:fd:b1:20:a7:22:05:74:f4:a0:bd:9c:b5:0c:cb:20:34:
24:d8:c7:d7:a9:86:bb:0c:4c:92:43:96:e3:b4:d2:eb:37:cf:
5d:6b:f3:27:f2:49:5f:f6:28:7b:37:c9:d9:5a:30:96:e0:83:
f9:ce:91:13:6a:ea:ef:00:fb:08:2c:3d:b2:aa:c8:c6:60:38:
7a:e1:57:d0:11:12:bf:66:1f:a0:ab:b2:92:71:03:cd:dd:2f:
52:a2:19:d5:df:d7:71:b9:98:33:08:64:96:4e:ea:11:59:84:
44:70:59:2a:a2:01:ac:70:a5:89:7e:ee:cd:4d:d0:f8:20:0a:
b9:4b:f3:3d:c6:00:6e:5c:c2:f1:b3:e9:9c:6f:de:0f:5e:fd:
05:a2:f1:fc:ac:25:b4:b6:4c:55:5a:37:9f:83:d1:ca:c0:cf:
63:aa:49:8b:79:da:39:e6:87:d3:0a:8c:e6:21:58:f3:b8:60:
90:01:88:ed:0e:89:3b:5b:71:21:2d:fb:7b:7d:e5:61:4a:2f:
cb:3f:1c:53:49:6d:b4:4c:e6:44:2d:2f:a9:6a:e4:67:a7:ab:
ea:db:16:67:e2:7f:7a:b4:4f:1e:eb:55:35:04:41:14:91:ad:
9a:cb:fa:23:c6:9b:ca:1d:d5:68:dc:d2:84:36:0f:06:e9:86:
cb:8e:c8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:01:21 2026 by rpki-client